Managing Assets

The platform enables detailed tracking and management of assets to address vulnerabilities effectively. Below are the key features and their explanations:

Asset Metadata

Primary Asset Identifier: Each asset has a unique identifier for tracking purposes.
Hostnames: The name(s) assigned to the system.
IP Addresses: Displays the network address(s) of the asset.
MAC Addresses: Represents the unique hardware address(s) for network interfaces (if applicable).
Remediation Owner: Indicates the person or team responsible for addressing the vulnerabilities, such as "Turbine User."
Remediation Channel: Specifies the workflow or channel used for addressing vulnerabilities.

Asset Criticality

Criticality Score: A numerical value representing the importance of the asset (range 0-10).
Criticality Label: Categorizes assets as "Low," "Medium,", “High” or "Critical" based on their criticality score.
Zone Criticality Score: Highlights the criticality of the network zone where the asset resides (range 0-10).
Zone Criticality Label: Categorizes zones as "Low," "Medium,", "High" or “Critical” based on their zone criticality score.

Asset Risk

Risk Score: A calculated value that reflects the vulnerability severity of the asset. (rangle 0-1000)
Open Vulnerability Count: Displays the number of unresolved vulnerabilities.
Risk Label: Classifies the risk as "Low," "Medium," "High," or "Critical" based on the score.
Risk Update Timestamp: Records the last update for the risk score

Asset SLA Targets

Defines resolution timelines for vulnerabilities based on their severity. Default values are:

Finding SLA Target Days - Critical: 1 day.
Finding SLA Target Days - High: 30 days.
Finding SLA Target Days - Medium: 7 days.
Finding SLA Target Days - Low: 180 days.

Documentation

Comments field: Allows for recording additional asset details as desired.

Editing Default Asset SLA Targets

Open the Component VRM - Map - Vulnerability Asset
Edit the Create Variables action (top action in the component).
Adjust the default values of the following variable as desired:
1. sla_target_days_critical
2. sla_target_days_high
3. sla_target_days_medium
4. sla_target_days_low